$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa File: 4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa (raw, json) Hash identifier: Jax5O4Mm33nih3i5FGoZuXVnEoBZOpiEUHgXFgw2FFs= Subject key identifier: B9:F5:4B:F7:2D:86:44:9F:CD:C0:B2:F8:B8:EE:C3:8E:76:E8:F4:B3 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 16653D6E0777EE14055B20A1EA20D3E13C5E41E0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa Signing time: Mon 14 Jul 2025 15:01:29 +0000 ROA not before: Mon 14 Jul 2025 15:01:29 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 203.110.206.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:65:3d:6e:07:77:ee:14:05:5b:20:a1:ea:20:d3:e1:3c:5e:41:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 14 15:01:29 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=a6470c1f824f802dbdcb187adb6ba32a2fbf7842a65e733d74d84657fa7f659a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ba:53:92:d0:9f:b6:18:21:69:e6:0e:5c:9e: 19:9c:21:61:c1:23:17:b6:89:db:7e:30:a9:c0:81: f6:aa:22:2b:e2:22:b8:bd:1b:78:53:82:9f:33:88: c5:2a:09:8c:22:fe:2c:ad:22:14:44:d6:bb:11:4f: 78:2e:46:ae:93:6d:8d:ef:95:5c:be:6d:38:e7:20: da:9e:41:ad:9b:4a:ba:76:9e:6b:6b:c9:2c:bd:ca: 3f:00:25:06:59:09:6e:3d:cc:0d:e4:4a:c2:5d:fc: cb:79:3d:c6:a7:e3:8f:f6:bb:c7:c8:ae:e4:7d:8a: 4f:c2:54:2a:67:58:1b:60:be:9c:48:a6:a4:84:ee: 6d:2b:fb:4b:ad:d0:96:b6:df:df:1b:26:1e:6b:83: 78:fc:0c:d9:80:14:89:29:6e:29:8f:e3:8c:bc:a6: 37:d3:4c:a1:41:25:65:02:38:df:8c:84:f9:00:74: 7b:3d:9b:db:89:79:70:0b:7e:b6:fa:ea:0f:17:14: f8:c5:30:cc:2d:62:90:9b:8d:cf:93:76:8b:6c:e6: 78:73:3d:fb:27:b5:59:02:6b:7a:20:0e:6a:db:ba: 86:5f:51:76:da:a0:18:01:37:f2:3e:92:ff:5e:2b: 61:88:dc:84:eb:db:68:a6:57:a5:3e:25:c3:8e:36: fe:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F5:4B:F7:2D:86:44:9F:CD:C0:B2:F8:B8:EE:C3:8E:76:E8:F4:B3 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.110.206.0/23 Signature Algorithm: sha256WithRSAEncryption b8:59:68:64:7d:b2:82:d3:0a:af:5b:08:ee:8e:93:2f:93:da: 41:43:eb:95:ec:2a:4c:e4:38:25:75:61:a3:3d:25:d3:07:9b: 1f:69:5f:99:56:26:e0:f3:31:ed:0e:79:55:3e:e3:43:34:83: 60:38:a1:fa:1d:53:69:5a:d0:d2:1a:be:fc:50:cb:a0:a1:bb: db:94:da:bc:11:ef:21:03:5b:bd:0d:51:5a:da:56:5e:69:13: 7b:52:c4:6a:76:ff:81:e8:28:19:d0:9f:3d:e0:1b:bb:65:4e: b3:d2:a4:a6:46:6c:1d:7d:16:b3:4b:24:bc:c9:5b:c6:8d:bb: 3b:28:c0:34:24:90:71:a2:be:5c:5b:74:b7:47:2c:b4:c3:df: 0c:93:a0:7d:b9:90:bb:d8:d1:83:42:4c:2e:a2:20:db:38:4e: 95:00:c7:02:95:5b:96:55:94:07:1d:0c:7c:df:41:b7:33:50: ee:f2:a9:59:23:ee:28:31:71:00:3b:4d:3c:b6:39:50:00:03: 28:5c:a2:a2:c8:8a:8d:07:90:4b:7e:a8:73:18:0f:00:3b:b0: cf:6b:12:fe:c4:29:73:13:b7:62:1b:da:c1:13:88:cb:5b:be: ad:a8:73:e1:ea:2c:64:c3:6e:12:6d:5b:1b:be:00:bd:f3:ca: 7b:32:8c:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFmU9bgd37hQFWyCh6iDT4TxeQeAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUwNzE0MTUwMTI5WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjQ3MGMxZjgyNGY4MDJkYmRjYjE4N2FkYjZiYTMyYTJm YmY3ODQyYTY1ZTczM2Q3NGQ4NDY1N2ZhN2Y2NTlhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ulOS0J+2GCFp5g5cnhmcIWHBIxe2idt+MKnAgfaqIivi Iri9G3hTgp8ziMUqCYwi/iytIhRE1rsRT3guRq6TbY3vlVy+bTjnINqeQa2bSrp2 nmtrySy9yj8AJQZZCW49zA3kSsJd/Mt5Pcan44/2u8fIruR9ik/CVCpnWBtgvpxI pqSE7m0r+0ut0Ja2398bJh5rg3j8DNmAFIkpbimP44y8pjfTTKFBJWUCON+MhPkA dHs9m9uJeXALfrb66g8XFPjFMMwtYpCbjc+Tdots5nhzPfsntVkCa3ogDmrbuoZf UXbaoBgBN/I+kv9eK2GI3ITr22imV6U+JcOONv4lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUufVL9y2GRJ/NwLL4uO7Djnbo9LMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRkOGQzNGRhLTBjMTAtNDM2NC05ZDBmLWU1YzQ0YzhlOWEwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAHLbs4wDQYJKoZIhvcNAQELBQADggEBALhZaGR9soLTCq9bCO6Oky+T2kFD 65XsKkzkOCV1YaM9JdMHmx9pX5lWJuDzMe0OeVU+40M0g2A4ofodU2la0NIavvxQ y6Chu9uU2rwR7yEDW70NUVraVl5pE3tSxGp2/4HoKBnQnz3gG7tlTrPSpKZGbB19 FrNLJLzJW8aNuzsowDQkkHGivlxbdLdHLLTD3wyToH25kLvY0YNCTC6iINs4TpUA xwKVW5ZVlAcdDHzfQbczUO7yqVkj7igxcQA7TTy2OVAAAyhcoqLIio0HkEt+qHMY DwA7sM9rEv7EKXMTt2Ib2sETiMtbvq2oc+HqLGTDbhJtWxu+AL3zynsyjJg= -----END CERTIFICATE-----Generated at Mon Jul 21 23:25:03 2025 by rpki-client